EUVD-2025-116886

Malicious code in adonis-rest-stream-non-blocking npm...

MAL-2025-142817 Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-stream-chai-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122107

Malicious code in selenium-stream-fetch-deneb npm...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124668

Malicious code in mysql-janus-non-blocking-stream npm...

EUVD-2025-121820

Malicious code in spawn-registry-hapi-stream npm...

MAL-2025-149221 Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139874 Malicious code in babel-stream-loop-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065a4392b21c6e73e1e73e96a3c48ac9c44bca69e156c43e03a58cf6fb3623c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-stream-fetch-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f119c5107d1516e05ddb76327a4fd1f0c2d0d7b498d4f65b97ed857f87e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121605

Malicious code in stream-jasmine-global-hydra npm...

MAL-2025-145213 Malicious code in mui-stream-jovian-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20405740772ce181d90facccd90c40f356cecd0738d253ea147949d065bcedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141516 Malicious code in delphinus-elektra-google-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a9f3c56f15f2dad442fa22d3bd3b846b22b3c8c6cb79ee4de7f413a622ddc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142294 Malicious code in europa-stream-yildun-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...